Skip to content

Remove FalconIoc

bk-cs edited this page Sep 22, 2022 · 21 revisions

Remove-FalconIoc

SYNOPSIS

Remove custom indicators

DESCRIPTION

Requires 'IOC Manager APIs: Write'.

PARAMETERS

Name Type Min Max Pattern Allowed Pipeline PipelineByName Description
Filter String False False Falcon Query Language expression to find indicators for removal
Comment String False False Audit log comment
Id String[] ^[A-Fa-f0-9]{64}$ Indicator identifier

SYNTAX

Remove-FalconIoc [[-Comment] <String>] [[-Id] <String[]>] [-WhatIf] [-Confirm] [<CommonParameters>]
Remove-FalconIoc -Filter <String> [[-Comment] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]

Generated 20220922 using PSFalcon v2.2.3

Clone this wiki locally